Spear Phishing

Pretnja u centru, tehnike kojima se izvodi levo, odbrane koje je suzbijaju desno. Ispod — mapa faza napada: kojom tehnikom se ulazi i koja odbrana je presreće.

↘ Techniques used to carry it out6

Techniques used to carry it out. Klik vodi na stranicu pojma.

threat · № 027 · social eng.

Spear Phishing

Spear phishing is phishing cut to fit one person or a small group of users. Instead of sending the same message to thousands of addresses, the attacker first gathers information about the victim — where they work, who they work with, what they are working on right now, how the company addresses its clients — and then writes a message that reads as if it came from that world.

↓ mapa faza · kojom tehnikom se ulazi, koja odbrana presreće

faza · izviđanje · tehnika OSINT o konkretnoj meti

presreće · odbrana Minimizacija javnih podataka · obuka

faza · dostava · tehnika Personalizovani email

presreće · odbrana DMARC/DKIM/SPF · gateway

faza · proboj · tehnika Krađa kredencijala ili pokretanje payload-a

presreće · odbrana MFA · EDR · sandbox

faza · iskorišćavanje · tehnika Pristup ciljanim resursima

presreće · odbrana Conditional access · monitoring

↗ How it is defended against8

How it is defended against. Klik vodi na stranicu pojma.